Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
File: ujG8-SPF8lyvvavf3UblEfld8NE.mft (raw, json)
Hash identifier: r1VOBfAxEB8x6Do84Kt6NKt/R0kktTMQAGDA2dpLIDU=
Subject key identifier: 31:41:3F:8A:B3:5B:C6:65:8D:C9:15:74:3F:59:03:ED:D5:83:94:12
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Certificate issuer: /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial: 019874193583C70E0BAFA7135D60720BE55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
Manifest number: 1623
Signing time: Mon 04 Aug 2025 08:01:05 +0000
Manifest this update: Mon 04 Aug 2025 08:01:05 +0000
Manifest next update: Tue 05 Aug 2025 08:01:05 +0000
Files and hashes: 1: 1-F-lRo8Hv4MMErxkMI8nf-QWOn0.roa (hash: 7Ak7QRZESqRwXP4kX1/tNAiv86us+4hOvNSyL+b0r48=)
2: Q4WmwtX1-yGfMV_as6mRHe0HLuE.roa (hash: lXJnylFGx+vUF6zQkDGWs8PitK2htiJr+yqpDV9ObmE=)
3: pG1KZHc4pymXEXUvmeM4GHLYNlA.roa (hash: 5KHE9uzvNu4RIDxwOSdN7PmOQXacqTWtDjsMZfOaj8Y=)
4: ujG8-SPF8lyvvavf3UblEfld8NE.crl (hash: R+hNF0rGDscj134XsaG94zjPXgHLGZ6xYWqVR4OyQ2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:35:83:c7:0e:0b:af:a7:13:5d:60:72:0b:e5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Validity
Not Before: Aug 4 08:01:05 2025 GMT
Not After : Aug 5 08:01:05 2025 GMT
Subject: CN=31413f8ab35bc6658dc915743f5903edd5839412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d8:fd:a8:f1:97:33:3e:a3:6c:6f:c3:29:fd:
f4:b3:29:92:ef:b6:ce:56:a4:a7:68:47:1a:e0:d6:
89:36:81:03:ee:fd:25:6f:db:da:71:27:46:20:17:
1c:31:d2:b2:6e:00:2e:bc:8d:ff:9c:22:01:11:e5:
5c:64:83:0f:9c:e8:a0:03:72:ea:56:8f:96:41:39:
4e:a4:9a:cd:9e:6b:ef:c3:38:48:25:42:13:9a:4e:
c9:33:7b:85:bd:15:99:35:fb:4c:ba:40:14:2c:16:
9a:65:3f:91:a9:6a:ca:3b:76:42:21:53:89:ca:82:
53:60:81:0d:f2:1c:ef:a4:4a:90:2b:b3:ab:c2:3e:
c2:b1:11:ca:86:2c:89:e0:18:0b:0f:ce:ac:df:04:
11:17:d5:e9:5e:ad:fe:ea:89:a4:22:a1:1b:ec:d4:
50:a2:f1:d2:9b:b3:6b:ee:0f:da:7c:85:da:5e:32:
d0:04:07:ab:2d:ca:a1:60:96:ae:e4:9d:49:27:2c:
46:18:94:74:d6:4d:06:a1:e1:37:c8:e5:d3:a7:6e:
b5:d7:20:ff:c2:c5:79:eb:4c:ee:84:71:2a:43:58:
06:ff:29:29:76:88:ae:02:9c:71:fb:9e:88:9c:1f:
17:1e:b5:41:f9:24:9d:d1:e2:c6:b8:b2:33:23:1b:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:41:3F:8A:B3:5B:C6:65:8D:C9:15:74:3F:59:03:ED:D5:83:94:12
X509v3 Authority Key Identifier:
keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7e:27:99:65:50:36:09:a7:0f:97:a0:40:33:97:81:ae:cc:
a5:ab:07:ee:76:a7:b9:a5:4c:2d:53:86:bb:8a:51:7e:30:e4:
51:03:8d:98:63:1c:e3:73:21:35:a3:ab:cf:4a:ce:5b:77:b8:
d9:d3:7c:2a:4e:90:90:ce:eb:9d:46:e9:be:9c:af:0d:a4:ea:
94:18:aa:02:10:f4:2c:36:b6:36:2d:c6:e9:f3:47:ae:5d:ce:
7e:9b:b6:22:3c:b7:89:7b:aa:97:91:36:94:9d:f1:e4:b9:18:
1a:a8:2c:6f:15:9d:6f:90:90:c2:1f:8a:34:1f:33:b3:08:06:
75:8c:5b:9b:e3:87:80:04:7c:6d:d3:d3:e7:21:02:70:c0:68:
28:3d:a9:14:96:60:f3:71:85:41:b6:0f:88:b7:19:88:e9:49:
27:10:1a:d2:33:0f:bc:a3:a0:8d:3a:9f:9a:76:c7:df:46:d9:
7a:ce:dc:0a:8b:9d:75:42:0b:2d:4e:4d:fe:5d:dc:cb:3b:f5:
33:06:29:06:a1:46:77:de:d8:69:37:b5:33:b2:15:06:92:ac:
36:6b:94:04:e9:c4:1b:56:bb:47:a2:99:e7:ff:9e:2f:31:8e:
37:7f:ef:cc:93:61:a7:28:be:d1:b9:79:b7:41:c9:be:a7:2e:
79:be:06:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:33 2025 by rpki-client